![]() ![]() ĭustySky searches for removable media and duplicates itself onto it. ĭarkhotel's selective infector modifies executables stored on removable media as a method of spreading across computers. Part of APT28's operation involved using CHOPSTICK modules to copy itself to air-gapped machines and using files written to USB sticks to transfer data and command traffic. ĪPT28 uses a tool to infect connected USB devices and transmit itself to air-gapped computers when the infected USB device is inserted. When the device is inserted into another system, it opens autorun.inf and loads the malware. Agent.btz drops itself onto removable media devices and creates an autorun.inf file with an instruction to run that file.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |